WHAT IS CLAIMED IS: 



1. A method of providing a plurality of secure computer 
environments in a shared computer system, 
comprising: 

providing said shared computer system, said 
shared computer system comprising: 
a plurality of computers; 

at least one virtual local area network 
switch connected to said plurality of 
computers ; 

a plurality of client connection ports 
connected to said virtual local area network 
switch; 

a configuration engine electrically 
connected to said at least one virtual local 
area network switch, said configuration engine 
comprising computer readable program code for 
configuring said at least one virtual local 
area network switch; and 

said configuration engine configuring said at 
least one virtual local area network switch to 
connect each of said plurality of client connection 
ports to at least one of said plurality of computers 
while isolating said plurality of client connection 
ports from one another so that each of said client 
connection ports may be connected to at least one of 
said plurality of secure computer environments on 
said plurality of computers. 

2. The method of claim 1, further comprising said 
configuration engine reading computer requirements 
from at least one client connected to at least one 
of said plurality of client connection ports. 
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3. The method of claim 2, further comprising said 
configuration engine calculating an optimum 
allocation of said plurality of computers to meet 
said computer requirements of said at least one 

5 client. 

4. The method of claim 1, further comprising said 
configuration engine configuring said at least one 
virtual local area network switch to connect at 
least two of said plurality of client connection 

5 ports to a same one of said plurality of secure 

vS computer environments on said plurality of 

m 

pg computers- 

ru 

j;r| ■ 5. The method of claim 1, further comprising connecting 

at least one client computer to said shared computer 

is 

□ system through at least one of said plurality of 

client connection ports . 



cn 

6. The method of claim 5, wherein said at least one 
client computer is connected to said shared computer 
system across a dedicated line. 

7. The method of claim 5, wherein said at least one 
client computer is connected to said shared computer 
system across the Internet. 

8. The method of claim 7, wherein said at least one 
client computer is connected to said shared computer 
system across the Internet with a modem connection. 
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The method of claim 7, wherein said at least one 
client computer is connected to said shared computer 
system across the Internet with a broadband 
connection . 



The method of claim 5, said shared computer system 
further comprising at least one virtual private 
network router connected to each of said plurality 
of client connection ports, said method further 
comprising said configuration engine configuring 
said at least one virtual private network router to 
connect said at least one client computer to at 
least one of said plurality of computers . 



The method of claim 10, said shared computer system 
further comprising computer readable program code 
for authenticating client identification, said 
method further comprising authenticating client 
identification before said configuration engine 
configures said at least one virtual private network 
router • 



The method of claim 1, said shared computer system 
further comprising at least one firewall connected 
to each of said plurality of client connection 
ports, said method further comprising said 
configuration engine configuring said at least one 
firewall to connect said at least one client 
computer to at least one of said plurality of 
computers . 
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A secure computer system, comprising: 

a plurality of computers; 

a plurality of client connection ports; 

at least one virtual local area network switch 
electrically connected to said plurality of 
computers and to said plurality of client connection 
ports, wherein said at least one virtual local area 
network switch is configurable to changeably connect 
each of said plurality of client connection ports to 
at least one of said plurality of computers while 
isolating said plurality of client connection ports 
from one another; and 

a configuration engine electrically connected 
to said at least one virtual local area network 
switch, said configuration engine comprising 
computer readable program code for configuring said 
at least one virtual local area network switch to 
changeably connect each of said plurality of client 
connection ports to at least one of said plurality 
of computers while isolating said plurality of 
client connection ports from one another. 

The secure computer system of claim 13, wherein said 
computer readable program code in said configuration 
engine further comprises code for a graphical user 
interface to manually configure said virtual local 
area network switch . 

The secure computer system of claim 13, wherein said 
computer readable program code in said configuration 
engine further comprises code for automatically 
configuring said virtual local area network switch. 
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16. The secure computer system of claim 13, wherein said 
computer readable program code in said configuration 
engine further comprises code for reading client 
computer requirements from at least one client 

5 connected to said client connection ports . 

17. The secure computer system of claim 13, further 
comprising at least one firewall connected to said 
plurality of client connection ports. 

18. The secure computer system of claim 13, further 
comprising at least one virtual private network 
router connected to said plurality of client 
connection ports. 



19. The secure computer system of claim 13, further 
ry comprising computer readable program code for 

authenticating identification of clients connected 
Ifl to said plurality of client connection ports. 

0 20. A secure computer system, comprising: 

a plurality of computers; 
a plurality of client data inputs; and 
means for securely connecting a portion of said 
5 plurality of client data inputs to a portion of 

said plurality of computers while isolating 
said portion of said plurality of computers 
from a second portion of said plurality of 
computers . 
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